Windows IT Pro is the authoritative and independent resource for windows nt, windows 2000, windows 2003, windows xp. Features a collection of resources and magazines for windows IT professionals.
  
  
  Advanced Search 


January 17, 2008

New Exchange ActiveSync Policies in Exchange 2007 SP1

RSS
Subscribe to Windows IT Pro | See More Exchange Server and Outlook Articles Here | Reprints | Or get the Monthly Online Pass—only $5.95 a month!

I love science fiction, and I grew up on a steady diet of both classic SF novels and '70s SF movies and shows. I therefore haven't been that surprised to see powerful handheld computers becoming more and more common over the last few years; anyone who's familiar with Star Trek's communicators or Space: 1999's commlocks won't find the technical potential of these devices all that surprising.

However much fun these shows were to watch, though, they were mighty short on technical details. For example, I don't think I ever saw a character say, "Hey, do I have to install a DST update on this thing?" or "Mr. Spock, be sure that we've installed Service Pack 2 on all the tricorders before we beam down." In addition, no one ever worried about any of the common problems mobile device deployments face today, such as enforcing organizational security policies, enabling remote wipe for lost or stolen devices, and so on.

Enter Exchange ActiveSync (EAS), Microsoft's solution to these problems. As you probably know, EAS is actually a protocol that's implemented in two places: on the Exchange server and on a mobile device. In Exchange Server 2007, each mailbox can be associated with exactly one EAS policy. There's a default policy that applies to mailboxes that don't have explicit policies set. The policy associated with a mailbox defines which EAS options apply to devices that synchronize with that mailbox. In Exchange 2007 SP1, Microsoft added more than 30 new options to EAS, which initially had about 9 or 10; in other words, SP1 added more new options than the total number of options available before. These options offer many interesting possibilities, including the ability to turn off external connections through Wi-Fi and Bluetooth; options that restrict the use of POP and IMAP email; settings for controlling whether attachments and HTML messages can be used on the device; and improved password length, strength, and complexity options.

These new settings are described in the Microsoft article "Understanding Exchange ActiveSync Mailbox Policies." There are a couple of subtle points to note when reading the description, though. The first is that some policy options require the purchase of an Exchange Enterprise CAL. For example, the Allow Camera and Allow text messaging options are licensed only for Enterprise CAL mailboxes. Remember, the Enterprise CAL is an additive CAL that you purchase in addition to the Exchange Standard CAL; it offers a ton of other features as well as these EAS enhancements. If you've already purchased the Enterprise CAL for your users, consider the changes a freebie. Microsoft is evidently hoping that the new options will attract organizations that have so far held off on Enterprise CAL purchases.

The second point about these new EAS options is a little trickier. Remember that EAS is a two-part protocol: The server can send out any policy it wants, but implementation is up to the client. Depending on which clients you use, you might see radically different behavior. For example, Windows Mobile 6.0 supports several policy settings that Windows Mobile 5.0 doesn't. Third parties who have licensed EAS, such as Sony Ericsson and Palm, are free to implement as many, or as few, of the policy control mechanisms as they like. In practical terms, what this means is that even though you upgrade to Exchange 2007 SP1 and purchase Enterprise CALs for the mailboxes for which you want to use these new policy settings, the devices you have might not support them!

This situation goes back to the larger problem that Microsoft's Mobile Communication Business faces: Mobile device vendors don't have much incentive to make it easy for end users to upgrade their device software. Most vendors would rather sell you a new phone than take the time and effort necessary to certify software upgrades for existing devices. Accordingly, if you want to take advantage of these new EAS features, be sure that the devices you purchase will support the features you're most interested in.

Speaking of interest: What does Apple's new MacBook Air have in common with Exchange? Read next week's UPDATE to find out!

End of Article



Reader Comments

You must log on before posting a comment.

If you don't have a username & password, please register now.




Top Viewed ArticlesView all articles
Friday at PASS Europe 2006

Kevin talks about the closing day of the event and shares a funny Microsoft film. ...

More fun TechEd 2005 Resources

Kevin points out some more TechEd resources ...

Microsoft Announces Upcoming Xbox 360 Milestones

Microsoft announced this morning that it will deliver a completely new user interface for the Xbox 360 on November 19, the New Xbox Experience, an update that will result in a "completely new Xbox 360." The company also revealed that it will be extending ...


Related Articles Microsoft Exchange Server 2007 SP1 Available for Download

Mobile Device Security: Whose Data Is It, Anyway?

Managing Mobile Messaging in Exchange 2007

Exchange 2007 Licensing

Exchange Server and Outlook Whitepapers Protecting (You and) Your Data with Exchange Server 2007

StoreVault SnapManagers for Microsoft Exchange and SQL Server

ETX Driving Embedded I/O

Related Events Check out our list of Free Email Newsletters!

Exchange Server and Outlook eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

The Expert's Guide for Exchange 2003: Preparing for, Moving to, and Supporting Exchange Server 2003

Related Exchange Server and Outlook Resources Become a VIP member of the Windows IT Pro community!
Get it all with the VIP CD and VIP access. A $500+ value for only $279!

Subscribe to Windows IT Pro!
Solve your toughest technical problems with our experts and access 10,000 + articles online. 30% off

Monthly Online Pass - Only $5.95!
Get instant access to 10,000+ articles from Windows IT Pro Magazine!

TechNet Virtual Labs
Evaluate and test Microsoft's newest products.

Exchange & Outlook UPDATE eNewsletter
News, strategies, products, and developments in Exchange Server and Outlook messaging.
Job Openings in IT


ADS BY GOOGLE SPONSORED LINKS FEATURED LINKS

Microsoft Exchange & Windows Connections event returns to Las Vegas Nov 10 - 13
Connections returns to Las Vegas for this exciting event where each attendee will receive SQL Server 2008 standard with 1 CAL. Co-located with Microsoft ASP.NET, SQL Server, and SharePoint Connections with over 250 in-depth sessions.

Free Online Event! Virtualization:Get the Facts!
Register now and attend this free, live in-depth online conference on November 13 and 20, 2008, produced by Windows IT Pro. All registrants are eligible to receive a complimentary one-year digital subscription to Windows IT Pro (a $49.95 value)!

Check Out Hyper-V Video on ITTV
Watch Karen Forster's interview on Hyper-V's performance on ITTV.net.

Ease Your Scripting Pains with the Flexibility of PowerShell!
Join MVP Paul Robichaux on December 11, 2008 at 11:00 AM EDT as he equips you with PowerShell basics in 3 introductory lessons, each followed by a live Q&A session—all on your own computer!

Latest Advancements in SSL Technology
There are a variety of different kinds of SSL to explore to ensure customer data is kept confidential and secure. In this paper, we will discuss some of these SSL advances to help you decide which would be best for your organization.

PASS Community Summit 2008 in Seattle on Nov 18-21
The don’t-miss event for Microsoft SQL Server Professionals. Register now and you’ll enjoy top-notch Microsoft and Community speakers and more.



Solving PST Management Problems
In this white paper, read about the top PST issues and how to administer local/network PST Files.

Get Protected -- Data Protection Manager 2007
Protect your virtualized environment with Data Protection Manager

Order Your SQL Fundamentals CD Today!
Learn how to use SQL Server, understand Office integration techniques and dive into the essentials of SQL Express and Visual Basic with this free SQL Fundamentals CD.

Maximize Your SharePoint Investment: Get Your Data Moving
Watch this web seminar now to learn how to maximize your SharePoint investment! Join us as we take a look at the complex business of securing, accessing and managing vast amounts of information in a global network and various ways to get your data moving.
Windows IT Pro Home Register FAQ for Windows WinInfo News
Europe Edition About Us Contact Us/Customer Service Media Kit Affiliates / Licensing  
SQL Server Magazine Office & SharePoint Pro Windows Dev Pro IT Job Hound ITTV
IT Library Technology Resource Directory Connected Home Windows Excavator Windows SuperSite 
 
 Windows IT Pro is a Division of Penton Media Inc.
 Copyright © 2008 Penton Media, Inc., All rights reserved. Terms and Use | Privacy Statement | Reprints and Licensing